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Abstract. In a previous paper, we presented several extensions of ACP 
with conditional expressions, including one with a retrospection opera- 
tor on conditions to allow for looking back on conditions under which 
preceding actions have been performed. In this paper, we add a constant 
for a process that is only capable of terminating successfully to those 
extensions of ACP, which can be very useful in applications. It happens 
that in all cases the addition of this constant is unproblematic. 
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1 Introduction 

In [TU], we presented several extensions of ACP [716] with conditional expressions. 
The main extensions of ACP presented in [TU] are ACP'^, an extension of ACP 
with conditional expressions of the form C :— >p in which the conditions are taken 
from a free Boolean algebra over a set of generators, ACP'^'^, an extension ACP'^ 
with a signal emission operator on processes, and ACP'^' , an extension of ACP'^ 
with a retrospection operator on conditions. Signal emission is usable for a special 
kind of condition evaluation. Retrospection allows for looking back on conditions 
under which preceding actions have been performed. We also extended ACP'^ 
and ACP'^'^ with operators devised for condition evaluation and we outlined an 
application of ACP'^'^ in which it allows for using conditions which express that 
a certain number of steps ago a certain action must have been performed. 

In this paper, a constant for a process that is only capable of terminating 
successfully is added to the different extensions of ACP presented in [TO]. This 
constant is often referred to as the empty process constant. In the past, the 
addition of the empty process constant to ACP has been treated in several ways. 
The treatment in |16| yields a non-associative parallel composition operator. The 
first treatment that yields an associative parallel composition operator |19| is 
from 1986, but was not published until 1997. The addition of the empty process 
constant to different extensions of ACP in this paper is based on 131. 

It is clear from early work |16I19| that the addition of the empty process 
constant to ACP was rather problematic. Its addition to the different extensions 



of ACP with conditional expressions presented in [lOj turns out to present no 
additional complications. For that reason, we look upon this paper in its current 
form primarily as supplementary material to ITO . 

The structure of this paper is as follows. First of all, we introduce ACP^, 
the extension of ACP'^ with the empty process constant (Section [2]). After that, 
we introduce conditional transition systems and splitting bisimilarity of condi- 
tional transition systems (Section|31) and the full splitting bisimulation models of 
ACP^, the main models of ACP^ (Section|4]). Following this, we have a closer look 
at splitting bisimilarity based on structural operational semantics (Section [S|). 
Next, we extend ACP^ with guarded recursion (Section |6]) . Thereupon, we ex- 
tend ACPg with condition evaluation operators (Section [7]), with state operators 
(Section [U and with a signal emission operator (Section [9]); and analyse how 
those operators are related. We also adapt the full splitting bisimulation models 
of ACPg to the full signal-observing splitting bisimulation models of ACP^**, the 
extension of ACPJ with signal emission (Section fTU)) . After that, we extend ACP^ 
with a retrospection operator (Section 1111) and adapt the full splitting bisimu- 
lation models of ACP^ to the full retrospective splitting bisimulation models of 
ACP", the extension of ACP^ with retrospection (Section [12]). Thereupon, we 
extend ACP" with condition evaluation operators as well (Section [13]). We also 
outline an interesting application of ACP" f Section (Til) . Finally, we make some 
concluding remarks (Section [T5t . 

Some familiarity with Boolean algebras is desirable. The definitions of all 
notions concerning Boolean algebras that are used can be found in |17) . 

We thank Jan van Eijck. He communicated an application of ACP'^ to us 
which involves a register update mechanism that cannot be dealt with in full 
generality without the empty process constant. This forms the greater part of 
our motivation to work out the addition of the empty process constant to ACP'^. 

2 ACPg with Conditions 

In this section, we present ACP^, an extension of ACP^ |5l6j with conditional 
expressions of the form C-—^P- ACP J can be regarded as an extension of ACP'^ [TOj 
with the empty process constant too. In ACP^, as in ACP^, it is assumed that a 
fixed but arbitrary finite set of actions A, with (5, e ^ A, and a fixed but arbitrary 
commutative and associative communication function | : A5 x A5 — > A5 , such that 
6 \ a — S for all a G A5, have been given. The function | is regarded to give the 
result of synchronously performing any two actions for which this is possible, 
and to be S otherwise. Moreover, it is assumed that a fixed but arbitrary set of 
atomic conditions Cat has been given. 

Let K be an infinite cardinal. Then Ck is the free K-complete Boolean algebra 
over Cat El As usual, we identify Boolean algebras with their domain. Thus, we 
also write for the domain of C^. If n is regular]^ then is isomorphic to 
the Boolean algebra of equivalence classes with respect to logical equivalence of 

^ For a definition of free K-complete Boolean algebras, see e.g. |17) . 

^ For a definition of regular cardinals, see e.g. (18. 13^ . They include Ho, Hi, H2, .... 
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the set of all propositions with elements of Cat as propositional variables and 
with conjunctions and disjunctions of less than k, propositions (see e.g. [171 ). In 
ACP^, conditions are taken from C^q. If Cat is a finite set, then — C^o for all 
cardinals k > Kg. We are also interested in for cardinals k > Hp because it 
permits us to consider infinitely branching processes in the case where Cat is an 
infinite set. Henceforth, we write C for Chq. 
The algebraic theory ACP^ has two sorts: 

— the sort P of processes; 

— the sort C of conditions. 

The algebraic theory ACP^ has the following constants and operators to build 
terms of sort P: 

— the deadlock constant (5 : P; 

— the empty process constant e : P; 

— for each a G A, the action constant a : P; 

— the binary alternative composition operator + : P x P — > P; 

— the binary sequential composition operator • : P x P P; 

— the binary guarded command operator :— : C x P — >■ P; 

— the binary parallel composition operator || : P x P — s- P; 

— the binary left merge operator [[ : P x P — > P; 

— the binary communication merge operator | : P x P — ^ P; 

— for each H C A, the unary encapsulation operator dn : P — > P. 

The algebraic theory ACP^ has the following constants and operators to build 
terms of sort C: 

— the bottom constant _L : C; 

— the top constant T : C; 

— for each r] £ Cat, the atomic condition constant 77 : C; 

— the unary complement operator — : C — > C; 

— the binary join operator U : C x C — C; 

— the binary meet operator □ : C x C — ?> C. 

We use infix notation for the binary operators. The following precedence con- 
ventions are used to reduce the need for parentheses. The operators to build 
terms of sort C bind stronger than the operators to build terms of sort P. The 
operator • binds stronger than all other binary operators to build terms of sort 
P and the operator + binds weaker than all other binary operators to build 
terms of sort P. 

The constants and operators of ACP^ to build terms of sort P are the con- 
stants and operators of ACPe and additionally the guarded command operator. 
Let p and q be closed terms of sort P and C and ^ be closed terms of sort C, 
a G A, _ff C A, and 77 G Cat- Then, intuitively, the constants and operators to 
build terms of sort P can be explained as follows: 

— S can neither perform an action nor terminate successfully; 
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— e terminates successfully, unconditionally; 

— a first performs action a and then terminates successfully, both uncondition- 
ally; 

— p + q behaves either as p or as q, but not both; 

— p ■ q first behaves as p, but when p terminates successfully it continues by 
behaving as q; 

— C P behaves as p under condition C; 

— p II q behaves as the process that proceeds with p and q in parallel; 

— p |[ q behaves the same as p \\ q, except that it starts with performing an 
action of p; 

— p\q behaves the same as p \\ q, except that it starts with performing an action 
of p and an action of q synchronously; 

^ dnip) behaves the same as p, except that actions from H are blocked. 

Intuitively, the constants and operators to build terms of sort C can be explained 
as follows: 

— 77 is an atomic condition; 

— _L is a condition that never holds; 

— T is a condition that always holds; 

— — C is the opposite of C; 

— C L-l ^ is either C or ^; 

— C n ^ is both C and £,. 

Some earlier extensions of ACP include conditional expressions of the form 
p <Ct> 9; see e.g. [5]. Just as in [TU], we treat conditional expressions of the 
form p <i(^\> q, where p and q are terms of sort P and C is a term of sort C, as 
abbreviations. That is, we write p<lCl>'?forC:->pH — -.-^ q. 

The axioms of ACP^ are given in Table □ CMS, CM7, C1--C3 and D1~D2 
are actually axiom schemas in which a, b and c stand for arbitrary constants of 
ACP^ that differ from e (i.e. a,b,cG Ag). In D0-D4, H stands for an arbitrary 
subset of A. So, DO, D3 and D4 are axiom schemas as well. Axioms A1-A9, 
CMIT, TM2, CM3, CM4, TM5, TM6, CM7-CM9, C1-C3 and D0-D4 are the 
axioms of ACPe. Axioms BAl~BA8 are the axioms of Boolean Algebras (BA). 
So ACPj imports the (equational) axioms of both ACP^ and BA. The axioms of 
BA have been taken from [15j. Several alternatives for this axiomatization can 
be found in the literature. Axioms GCl-GCll have been taken from f5], but the 
axiom x ■ z <l (j)l> y ■ z = (x <i (j)^ y) ■ z (COS) is replaced by the simpler axiom 
(f> X ■ y — {(p x) ■ y (GC5) and similarly for axioms GC8-GC11. 

The terms of sort C are interpreted in C as usual. 

We proceed to the presentation of the structural operational semantics of 
ACP^. The following relations on closed terms of sort P from the language of 
ACP^ are used: 

— for each a E C \ {-L}, a unary relation I"!-],; 

— for each £ E (C\{±}) x A, a binary relation A. 
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Table 1. Axioms of ACP^ (a, b,c£ As) 



X + y — y + X 


Al 


dH{e) = e 






DO 


(x + y) + z ^ X + {y + z) 


A2 


Oh (a) = a 


if a 




Dl 


X + X — X 


A3 


Oh (a) = S 


if a 


e H 


D2 


{x + y)-z — x-z + y- z 


A4 


dnix + y) = dnix) + dniy) 


D3 


{x ■ y) ■ z = X ■ {y ■ z) 


A5 


dnix ■ y) ^ dn 


(x) ■ dniy) 




D4 


X + 5 = X 


A6 










S ■ X = 5 


A7 


T :— > x = x 






GCl 


X ■ e = X 


A8 


A.:-^ x — 5 






GC2 


e ■ X = X 


A9 








GC3 






(t> -.-^ [x + y) ^ 


(p :— 7> X + <p 




GC4 


x\\y ^ X W_y + y Hx + x\y + 




cj> -.^ x ■ y = {(j> 


:-> x) ■ y 




GC5 


9a(s) • dA{y) 


CMIT 


4> > {ill -.^ x) 


= {<pni)) 


y X 


GC6 


€lx = S 


TM2 


{(j) U ij)) -.-^ x — 


(p :— )■ X + tp 


> X 


GC7 


a-xly^a-{x\\y) 


CMS 


{<j):^x)ly^ 


<t>-^ (x ly) 


GC8 


{x + y)\lz = xlz + y\lz 


CM4 


{(j>:^x)\y = <. 


p:^ ix\ y) 




GC9 


e \ X = 5 


TM5 


a; 1 (<^:^y) = < 


p-.-^ixl y) 




GCIO 


X \ e = 


TM6 


dH{(t> x) = 


p dnix) 




GCll 


a-x\b-y = {a\h)-{x\\y) 


CM7 










{X'\'y)\z = x\ z-'ry\z 


CMS 


(/> U ± = 






BAl 


x\{y + z) = x\ y + x\ z 


CM9 


</> U -(^ = T 






BA2 






(l> U ip = ip U (j) 






BA3 


a\b = h\ a 


01 


(l>u{ipnx) = 


<j>vAip)n{<j> 




BA4 


{a\b) \ c = a \ {b \ c) 


02 


(/> n T = </> 






BA5 


S\a = 5 


03 


(l>n~<j) = ± 






BA6 






(f> n tp = tp n (j) 






BA7 






(Pn{ipux) = 


(j>nip)u{<j> 


nx) 


BA8 



We write p ["'j, instead of p e ["Ij, and p °> q instead of (p, q) e > . The 
relations '"'j, and A can be explained as follows: 

— p p is capable of terminating successfully under condition a; 

— p ^"^ °> q: p is capable of performing action a under condition a and then 
proceeding as q. 

The structural operational semantics of ACP^ is described by the transition rules 
given in Tabled 
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Table 2. Transition rules for ACP^ 



[T]a 

a > e 



X > X 



\<t>] a, / 

y > y 



X y X 1^1;, y ^ y 



X ■ y l-^nVl; 
X y 



X ■ y > y' 



\4>] a I 



X > x' 



[0] a I 

X ■ y > X ■ y 



> n V ^ ■ 



■ X > x' 



(/) n ?/i 7^ ± 



X > X 



y 



y 



x\\y ['^TT/'lj, 

I<A1 a , [lAl 6 

a; -t^^ x', y -^^^ y' 
X II 1/ > x' II y' 



II [01 a ; II II [0] a II / 

^' II ?/ ^ ^ II y ^ \\y ^ ^' II y 



a\b = c, ip^ip ■ 



M^x',y^y' 



II [01 / II I [0rii/j] c / II / 
xiy >x'\\y x\y >x'\\y' 



a\b = c, (t>r\il) ^ 1. 



[0]a^ 



H 



3 Transition Systems and Splitting Bisimilarity for ACP^ 

In this section, we adapt the definitions of conditional transition systems and 
splitting bisimilarity of conditional transition systems from [10' to the presence 
of a process that is only capable of terminating successfully. In Section 21 we will 
make use of conditional transition systems and splitting bisimilarity of condi- 
tional transition systems as defined in this section to construct models of ACP^. 

The transitions of conditional transition systems have labels that consist of 
a condition different from _L and an action. Labels of this kind are sometimes 
called guarded actions. Henceforth, we write C~ for \ {J-}. 

Let K be an infinite cardinal. Then a k- conditional transition system T con- 
sists of the following: 

— a set S of states; 

— a. set A- C S X S, for each ^ G x A; 

— a set C S, for each a G C^; 

— an initial state s'^ G S. 

If (s, s') G for some £ G C~ X A, then we say that there is a transition from 
s to s'. We usually write s °> s' instead of (s, s') G and s ["Ij, instead 

of s G ["'i. Furthermore, we write for the family of sets {-^)(^c^ xa ^^^'^ ^ ^'-'^ 
the family of sets ('"'-i)^^^-- 
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The relations ["'4- and ~^ can be explained as follows: 

— s ["Ij-- in state s, it is possible to terminate successfully under condition a; 

— s °> s': in state s, it is possible to perform action a under condition a, 
and by doing so to make a transition to state s' . 

A conditional transition system may have states that are not reachable from 
its initial state by a sequence of transitions. Unreachable states, and the transi- 
tions between them, are not relevant to the behaviour represented by the tran- 
sition system. 

Let T = {S, — 4,, s'^) be a K-conditional transition system (for an infinite 
cardinal k). Then the reachability relation of T is the smallest relation C SxS 
such that: 

- s -» s; 

- if s s' and s' — » s" , then s ^ s" . 

We write RS(r) for {s G S* | s° — » s}. T is called a connected K-conditional 
transition system if S* = RS(T). 

Henceforth, we will only consider connected conditional transition systems. 
However, this often calls for extraction of the connected part of a conditional 
transition system resulting from composition of connected conditional transition 
systems. 

Let T = {S, I, s'^) be a K-conditional transition system (for an infinite 
cardinal k) that is not necessarily connected. Then the connected part of T, 
written r(T), is defined as follows: 

where 

S' ^ RS(r) , 
and for every ^ G x A and a E C^: 

4 ' = 4 n (5' X 5') , 
= n s' . 

It is assumed that for each infinite cardinal k a fixed but arbitrary set 
with the following properties has been given: 

— the cardinality of is greater than or equal to k; 

- if Si, 52 C 5„, then 81^82 C 5„ and Si x S2 Q S^E 

^ We write AW B ior the disjoint union of sets A and B, i.e. AH) B ^ {A x {0}) U 
{B X {{0}}). We write ni and fi2 for the associated injections ^1 : A ^ Aktl B and 
fi2 ■■ B Aw B, defined by ^i(a) = (a, 0) and fj,2{b) = (b, {0}). 
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Let K be an infinite cardinal. Then CTS^ is the set of all connected k- 
conditional transition systems T = (5', — >, J,, s°) such that S C and the 
branching degree of T is less than k, i.e. for all s € S, the cardinality of the 
set {(£, s') e{C- X A)x S \ (s, s') e 4} U {a G C" | s e ["l^} is less than k. 

The condition S C Sk guarantees that CTS^ is indeed a set. 

A conditional transition system is said to be finitely branching if its branching 
degree is less than Hq. Otherwise, it is said to be infinitely branching. 

The identity of the states of a conditional transition system is not relevant to 
the behaviour represented by it. Conditional transition system that differ only 
with respect to the identity of the states are isomorphic. 

Let Ti = (S'l, — >i, 4,^, s?) and T2 = {S2, -^2, 4-2) ^2) be /t-conditional transition 
systems (for an infinite cardinal k). Then Ti and T2 are isomorphic, written 
Ti ^ T2, if there exists a bijective function b : Si ^ S2 such that: 

- 6G^?) = .se; 

- si 4i .s[ iff 6(si) ^2 6(s'i); 

- s iff 6(s) H4,2. 

Henceforth, we will always consider two conditional transition systems essentially 
the same if they are isomorphic. 

Remark 3.1. The set CTS^ is independent of Sk- By that we mean the following. 
Let CTS^ and CTS^' result from different choices for S^. Then there exists a 
bijection b : CTS^ CTS^' such that for all T e CTS^, T ^ b{T). 

Bisimilarity has to be adapted to the setting with guarded actions. In the 
definition given below, we use two well-known notions from the field of Boolean 
algebras: a partial order relation O on and a unary operation |_| on the set 
of all subsets of of cardinality less than k (for each infinite cardinal k). The 
relation C and the operation |J are defined by 

aC^ iff aU/3 = /3 and U ^ supremum of C in (C^, E) , 

respectively. The operation |J is defined for all subsets of of cardinality less 
than K, because is k -complete. 

Let Ti = (5i,^i,;i,s;) e CTS^ and T2 = {S2,^2,i2,4) S CTS^ (for 
an infinite cardinal k). Then a splitting bisimulation B between Ti and T2 is 
a binary relation B C Si x S2 such that B{si,S2) and for all si,S2 such that 
B{si,S2): 

- if $1 °> 1 s'l, then there is a set CS2 C C~ x 5*2 of cardinality less than 

K such that a C |Jdom(CS'2) and for all (a',S2) ^ C'S'2, S2 -^—^2 s'2 and 

B{s'i,s'2); 

- if $2 °> 2 s'2, then there is a set CS'i C x S'l of cardinality less than 

K such that a C |Jdom(CS'i) and for all {a',s'i) G CS'i, si ^" ^ °> 1 s'l and 
B{s'i,s'2); 
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— if si ^"'4-1; then there is a set C" C of cardinahty less than k such that 
a □ U C" and for all a' G C", ss ["''la; 

— if S2 ^"'-1-2; then there is a set C C of cardinality less than k such that 
a E LJC and for all a' e C", si ["'lli. 

Two conditional transition systems Ti,T2 G CTS^ are splitting bisimilar, written 
Ti ^ T2 , if there exists a splitting bisimulation B between Ti and T2 . Let i? be 
a splitting bisimulation between Ti and T2. Then we say that _B is a splitting 
bisimulation witnessing Ti To . 

The name splitting bisimulation is used because a transition of one of the 
related transition systems may be simulated by a set of transitions of the other 
transition system. 

It is easy to see that ^ is an equivalence on CTS^. Let T E CTS^. Then we 
write [T]^ for {T' G CTS^ | T ^ T'}, i.e. the ^-equivalence class of T. We 
write CT§^/^ for the set of equivalence classes {[T]^\T e CTS%}. 

In Sectional we will use CTS^ as the domain of a structure that is a model 
of ACPJ. As the domain of a structure, CTS^/^ must be a set. That is the case 
because CTS^ is a set. The latter is guaranteed by considering only conditional 
transition systems of which the set of states is a subset of 5^ . 

Remark 3. 2. The question arises whether is large enough if its cardinality is 
greater than or equal to k. This question can be answered in the affirmative. 
Let T = [S,-^,\r,s^) be a connected ^-conditional transition system of which 
the branching degree is less than k. Then there exists a connected K-conditional 
transition system T' = (S", — J,', s°') of which the branching degree is less than 
K such that T ^T' and the cardinality of S' is less than k. 

It is easy to see that, if we would consider conditional transition systems with 
unreachable states as well, each conditional transition system would be splitting 
bisimilar to its connected part. It is also easy to see that isomorphic conditional 
transition systems are splitting bisimilar. 

4 Full Splitting Bisimulation Models of ACP^ 

In this section, we introduce the full splitting bisimulation models of ACP^. 
They are models of which the domain consists of equivalence classes of condi- 
tional transition systems modulo splitting bisimilarity. The qualification "full" 
expresses that there exist other splitting bisimulation models, but each of them 
is isomorphically embedded in a full splitting bisimulation model. 
The models of ACP^ are structures that consist of the following: 

— a non-empty set V, called the domain of the model; 

— for each constant of ACF^, an element of V; 

— for each n-ary operator of ACP^, an n-ary operation on V. 

In the full splitting bisimulation models of ACP^ that are introduced in this 
section, the domain is CTS^/^ for some infinite cardinal k. We obtain the models 
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where 



concerned by associating certain elements of CTS^/^ with the constants of 
ACP^ and certain operations on CTS^/^ with the operators of ACP^. We begin 
by associating elements of CT§^ and operations on CTS% with the constants and 
operators. The result of this is subsequently lifted to CTS^/^. 

It is assumed that for each infinite cardinal k a fixed but arbitrary function 
cK ■■ CPiS^) \ 0) H> 5« such that for all S e P{S^) \ 0, cK{S) e S has been 
given. 

We associate with each constant c of ACP^ an element c of CTS^ and with 
each operator / of ACP^ an operation / on CTS^ as follows. 

? = ({5°}, 0,0, 5°), 

where 

sO = ch«(5,) . 
e =({sO},0,;,sO), 

and for every a G C~ \ {T}: 
= . 

where 

s° = ch«(5«) , 

= cK{S^ \ {s°}) , 

and for every (a', a') e (C" x A) \ {(T, a)} and a" e C" \ {T}: 



[a'] a' 



> = 0, 



=0. 

- Let Ti = {Si, -^i, ii, s?) e CTS^ for i = 1, 2. Then 

n+T2=T{S,^,i,s°) , 

where 

= chJ5« \ (5i W ^2)) , 
S = {sO} U (5i W ^2) , 
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and for every (a, a) G x A and a' G : 

^ = {(.o,A^i(.))|.? s} 

u{{^,^{s),^,,{s'))\s^, s'} 

U {5° I 5° ["'lij 

U {M2(s) I S ["'lis} • 

- Let Ti = {Si, -^i, ii, s°) e CTS^ for i = l,2. Then 

Ti^T2 = r(5,^,;,s?) , 
where 

and for every (a, a) € C~ x A and a' G C~: 

^ = {(/xi(s),Mi(s'))h^i A ^3/3.5' 

U{(mi(s),M2(s^))I3s',;9.s^i s' a s' [/^lij 

U{(/X2(S°),M2(S'))| 

3s, ,s ^% A -t^2 s' A a = pni3'} 
U{(/X2(S),M2(S')) |s^2 s' A s^sO}, 
["'1; = {M2(s^) I 3s, /3, /3' . s [/^l;! A 5° A a' = /3 n /3'} 
U{/Z2(s) |s[«'l;2A St^S^}. 

- Let T = (5, s°) G CTS^. Then 

a:-^T = r(5, ^',;',s°) , 
where for every (a', a) G C~ x A and a" G C~: 

-i^' = {(s°,s')\3p,s° -^s' A a' = an^} 

U {(S,S') I S^^S' A 5 7^5°}, 

= {s° 13/3.5° ['^l; A a" = a n /3} 
U {s I s [""l^A s ^ s°} . 

- Let Ti = {Si, -^i, ii, s?) G CTS^ for i = l,2. Then 

TjT2 = (5,^,i,sO), 
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where 

S =SixS2, 
and for every {a, a) G C~ x A and a" £ C~ : 

^ = {{{S,,S2),{S[,S2)) I Si ^1 S[ A S2 e S2} 

U {((S1,S2),(S1,4)) I Si G 5i A S2 ^2 S'2} 

U {((Sl,S2),(si,s'2)) I 

V/ [a'] / , [l3'] b' I . 

(Sl > 1 S'l A S2 -^^^2 4 A 

a',/3'eC-,a',b'eA = « A a' \ b' = o)] , 

[""1; = {(si, S2) 1 V (si A S2 ^^\2 A a' n /3' = a")} • 

- Let Ti = {Si,^i,ii,s^) e CTS^ for i = 1,2. Suppose that Ti || r2 = 
(5,^4,5°). Then 

T,lT2 = T{S',^',i,s^'), 

where 

5°' = ch«(<S, \ S) , 
S' = {fiO'} U S , 
and for every (a, a) S C~ x A: 

= {(5°', (s, 5°)) I ^1 ,s} U ^ . 

- Let Ti = {Si,^i,ii,s°) G CT§^ for i = 1,2. Suppose that Ti 1| T2 = 
{S,^,i,s'^). Then 

riTT2 = r(5',^',4,s°') , 

where 

S' = {s°'} U S , 
and for every (a, a) G C~ x A: 

i^' = {(A(si,S2))| 

V ^1 «1 A sO J^2 52 A 

a',/3'ec^,a',6'eA a' □ ^' = a A a' | 6' = tt)} . 
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- Let r = {S, ^, s°) e CTE>%. Then 

a^(T) = r(5,^',i,sO) , 
where for every {a, a) G x (A \ H): 

and for every (a, a) G x : 

In the definition of alternative composition on CTS^, a new initial state is in- 
troduced because, in Ti and/or T2, there may exist a transition back to the 
initial state. The connected part of the resulting conditional transition system 
is extracted because the initial states of Ti and T2 may be unreachable from the 
new initial state. 

Remark 4.1. The elements of CTS^ and the operations on CTS^ defined above 
are independent of ch^ . Different choices for ch^ lead for each constant of ACP^ 
to isomorphic elements of CTS^ and lead for each operator ACP^ to operations 
on CTSJ^ with isomorphic results. 

We can show that splitting bisimilarity is a congruence with respect to the 
operations on CTSJ^ associated with the operators of ACPJ. 

Proposition 4.1 (Congruence). Let k be an infinite cardinal. Then for all 
Ti, Ta, Ti, T^ G CTS% and aeC^,Ti^ T{ and T2 ^ T^ imply T1+T2 ^ Ti +T^, 
T^-T^^Ti^ T^, a^Ti^a^ T[, Ti f T{f T^, Ti | T2 1± | T^, 

Ti T T2 ^ T^T n and dniTi) ^ d^{Ti). 

Proof. For all operations except ||, witnessing splitting bisimulations are con- 
structed in the same way as in the congruence proofs for the corresponding 
operations on CTS^ given in [TU]. For ||, the construction of a witnessing split- 
ting bisimulation is easier than in [10] Let Ri and R2 be splitting bisimulations 
witnessing Ti ^ T[ and T2 ^ Tj, respectively. Then we construct relations R-^ 
as follows: 

- R^^ {((si,s2),(s;,4)) I (si,.s;) G i?i,(s2,s2) e R^}- 

Given the definition of parallel composition, it is easy to see that R-^ is a splitting 
bisimulation witnessing Ti ][ T2 ^ j| T^ . □ 

The full splitting bisimulation models one for each infinite cardinal k, 
consist of the following: 

* Because the relation constructed in [10) is by mistake the same as the one constructed 
in this paper, we should actually say "in the revision of [lOj that can be found at 
www.win.tue .niykeesm/ sbrc.pdf " . 
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— a set "P, called the domain of ^P^'^; 

— for each constant c of ACP^, an element c of 7-"; 

— for each n-ary operator / of ACP^, an rt-ary operation / on V] 

where those ingredients are defined as follows: 

e [TiU\\[T2U=[T^\\T2U, 
a =[a]^, [T^Ul[T2U=[T,lT2U, 

The operations on CTS^/^ are well-defined because ^ is a congruence with 
respect to the corresponding operations on CTS^. 
The structures are models of ACP^. 

Theorem 4.1 (Soundness of ACP^). For each infinite cardinal k, we have 

Proof. Because ^ is a congruence, it is sufficient to show that all additional 
axioms are sound. The soundness of all additional axioms follows easily from the 
definition of □ 

For all axioms that are in common with ACP'^, the proof of soundness with 
respect to ^P^'^ follows the same line as the proof of soundness with respect to 

The full splitting bisimulation models are related by isomorphic embeddings. 

Theorem 4.2 (Isomorphic Embedding). Let k and k' be infinite cardinals 
such that K < k' . Then is isomorphically embedded in ^P^*; . 

Proof. The proof is analogous to the proof of the corresponding property for the 
full splitting bisimulation models of ACP*^ given in [10] . □ 

5 SOS-Based Splitting Bisimilarity for ACP^ 

It is customary to associate transition systems with closed terms of the language 
of an ACP-like theory about processes by means of structural operational se- 
mantics and to identify closed terms if their associated transition systems are 
splitting bisimilar. 

The structural operational semantics of ACP^ presented in Section [2] deter- 
mines a conditional transition system for each process that can be denoted by 



14 



a closed term of sort P. These transition systems are special in the sense that 
their states are closed terms of sort P. 

Let p be a closed term of sort P. Then the transition system oi p induced by 
the structural operational semantics of ACPJ, written CTS(p), is the connected 
conditional transition system r(5, -^,-1, s^), where: 

— 5' is the set of all closed terms of sort P; 

— the sets C 5 x S* and ["1; C S for each a S C \ {_L} and a G A are the 
smallest subsets of 5 x 5 and S, respectively, for which the transition rules 
from Table [1 hold; 

— e 5 is the closed term p. 

Let p and q be closed terms of sort P. Then we say that p and q are splitting 
bisimilar, written p^q,ii CTS(p) ^ CTS(g). 

Clearly, the structural operational semantics does not give rise to infinitely 
branching conditional transition systems. For each closed term p of sort P, there 
exists a T G CTS^^ such that CTS(p) = T. In Section|31 it has been shown that 
it is possible to consider infinitely branching conditional transition systems as 
well. 

6 Guarded Recursion 

In order to allow for the description of (potentially) non-terminating processes, 
we add guarded recursion to ACF^. 

A recursive specification over ACF^ is a set of equations E — {X — tx | 
X G V} where is a set of variables and each tx is a term of sort P that only 
contains variables from V. We write V(£') for the set of all variables that occur 
on the left-hand side of an equation in E. A solution of a recursive specification 
-E is a set of processes (in some model of ACF^) {Px \ X G V{E)} such that the 
equations of E hold if, for all X G V(i?), X stands for Px- 

Let t be a term of sort P containing a variable X. We call an occurrence of X 
in t guarded if t has a subterm of the form a ■ t' containing this occurrence of X. 
A recursive specification over ACF^ is called a guarded recursive specification if 
all occurrences of variables in the right-hand sides of its equations are guarded 
or it can be rewritten to such a recursive specification using the axioms of ACF^ 
and the equations of the recursive specification. We are only interested in models 
of ACF^ in which guarded recursive specifications have unique solutions. 

For each guarded recursive specification E and each variable X G V(i?), we 
introduce a constant of sort P standing for the unique solution of E for X. This 
constant is denoted by {X\E). We often write X for {X\E) if E is clear from 
the context. In such cases, it should also be clear from the context that we use 
X as a constant. 

We will also use the following notation. Let t be a term of sort P and E be 
a guarded recursive specification over ACF^. Then we write {t\E) for t with, for 
all X G y{E), all occurrences of X in t replaced by {X\E). 

The additional axioms for recursion are the equations given in Table [3l Both 
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Table 3. Axioms for recursion 



{X\E) = {tx\E) \^X = txeE RDP 
E^X^{X\E) ifXGV(£) RSP 



Table 4. Transition rules for recursion 



{tx\E) l-^ij, 
{X\E) 



{tx\E) 



[4,] a 



x=tx e E 



X = tx G E 



{X\E) 



RDP and RSP are axiom schemas. A side condition is added to restrict the 
variables, terms and guarded recursive specifications for wliicli X, tx and E 
stand. The additional axioms for recursion are known as the recursive definition 
principle (RDP) and the recursive specification principle (RSP). The equations 
{X\E) = {tx\E) for a fixed E express that the constants {X\E) make up a 
solution of E. The conditional equations E X = {X\E) express that this 
solution is the only one. 

The structural operational semantics for the constants {X\E) is described by 
the transition rules given in Table 21 

In the full splitting bisimulation models of ACP^, guarded recursive specifi- 
cations over ACPj have unique solutions. 

Theorem 6.1 (Unique solutions in 'P^'^). For each infinite cardinal k, 
guarded recursive specifications over ACP^ have unique solutions in . 

Proof. The proof is analogous to the proof of the corresponding property for the 
full splitting bisimulation models of ACP'^ given in [10] . □ 

Thus, the full splitting bisimulation models ^f^' of ACP^ with guarded recursion 
are simply the expansions of the full splitting bisimulation models of ACP^ 
obtained by associating with each constant {X\E) the unique solution of E for 
X in the full splitting bisimulation model concerned. 

7 Evaluation of Conditions 

Guarded commands cannot always be eliminated from closed terms of sort P 
because conditions different from both _L and T may be involved. The condition 
evaluation operators introduced below, can be brought into action in such cases. 
These operators require to fix an infinite cardinal A. By doing so, full splitting 
bisimulation models with domain CT§^/^ for k > A are excluded. 

There are unary X- complete condition evaluation operators CE/j :P — )■ P and 
CEft, : C — >■ C for each A-complete endomorphisms h of CaH 

These operators can be explained as follows: CEh{p) behaves as p with each 
condition C occurring in p replaced according to h. If the image of C\ under h 

^ For a definition of ^-complete endomorphisms, see e.g. [17j . 
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Table 5. Axioms for condition evaluation (a £ A^, 77 G Cat, J?' G Cat U {_L, T}) 



CEh(e) = e 


CEIT 


CE4±) = ± 




CE6 


CEh(a ■ a;) = a ■ CEh(j:) 


CE2 


CE;,(T) = T 




CE7 


CEh(a: + j/) = CEh(2:) + CEh(t/) 


CE3 




if h{r^) = 77' 


CE8 


CEh(0:->x) = CE;,(0) -.^CEnix) 


CE4 


CE^i^cP) = - 


-CEh(0) 


CE9 


CEh(CEh/(a::)) = CEhoh/(2;) 


CE5 


CEh{(pUi;) = 


:CE;,(9i)UCE;,(V) 


CEIO 






CEh(0nV) = 


: CE40) n CEh(V.) 


CEll 



Table 6. Transition rules for condition evaluation 



■> X' 



is B, i.e. the Boolean algebra with domain {±, T}, then guarded commands can 
be eliminated from CEh{p). In the case where the image of Cx under h is not B, 
CE/i can be regarded to evaluate the conditions only partially. 

Henceforth, we write Hx for the set of all A-complete endomorphisms of Cx ■ 
The additional axioms for CE/i, where h £ Tix, are the axioms given in 
Tabled 

The structural operational semantics of ACP^ extended with condition eval- 
uation is described by the transition rules for ACP^ and the transition rules 
given in Table El 

If A is a regular infinite cardinal, the elements of Cx can be used to represent 
equivalence classes with respect to logical equivalence of the set of all proposi- 
tions with elements of Cat as propositional variables and with conjunctions and 
disjunctions of less than A propositions. We write Vx for this set of propositions. 
If A is a regular infinite cardinal, it is likely that there is a theory <P about the 
atomic conditions in the shape of a set of propositions. Let C Pa, and let 

e "Hx be such that for all a, (3 £ Cx- 

'Ph {{h^{a))) ^ ((a)) and h^{a) ^ h<i.{(3) iff h ((a)) ^ {{(3)) (1) 

where ((a)) is a representative of the equivalence class of propositions isomorphic 
to a. Then we have h,p{a) = T iff ((a)) is derivable from and h^{a) = ± iff 
-1 ((a)) is derivable from ^. The image of Cx under is B iff is a complete 
theory. If is not a complete theory, then h^, is not uniquely determined by ([T]) . 
However, the images of Cx under the different endomorphisms satisfying ([T]) 
are isomorphic subalgebras of Cx- Moreover, if both h and h' satisfy ([IJ, then 
# h {{h{a))) {{h'ia))) for all a e Cx- 

Below, we show that condition evaluation on the basis of a complete theory 
can be viewed as substitution on the basis of the theory. That leads us to the 
use of the following convention: for a G C, a stands for an arbitrary closed term 
of sort C of which the value in C is a. 
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Proposition 7.1 (Condition evaluation on the basis of a theory). As- 
sume that X is a regular infinite cardinal. Let <P C Vx be a complete theory and 
let p be a closed term of sort P. Then CEh^(j>) — p' where p' is p with, for all 
a G C, in all subterms of the form a :— >■ q, a replaced by T if ^ \- {{a}) and a 
replaced by 1- if <P \ — < {{a)) . 

Proof. This result follows immediately from the definition of and the dis- 
tributivity of CE/i^ over all operators of ACP^. □ 

In /iCRL [H], an extension of ACP which includes conditional expressions, we 
find a formalization of the substitution-based alternative for CE/j^. 

The substitution-based alternative works properly because condition evalu- 
ation by means of a A-complete condition evaluation operator is not dependent 
on process behaviour. Hence, the result of condition evaluation is globally valid. 
Below, we will generalize the condition evaluation operators introduced above in 
such a way that condition evaluation may be dependent on process behaviour. 
In that case, the result of condition evaluation is in general not globally valid. 

Remark 7.1. Assume that A is a regular infinite cardinal. Let h G Tlx. Then h 
induces a theory C Px such that h — h^, viz. the theory <P defined by 

<P ^ {{{hia))) ^ {{a)) \aeCx}U {{{a)) ^ | M«) - /^(/?)} • 

Consequently, if A is a regular infinite cardinal, condition evaluation by means of 
the A-complete condition evaluation operators introduced above is always condi- 
tion evaluation of which the result can be determined from a set of propositions. 
We will return to this observation in Section [9l 

We proceed with generalizing the condition evaluation operators introduced 
above. It is assumed that a fixed but arbitrary function eff : A x Hx T~Lx has 
been given. 

There is a unary generalized X-complete condition evaluation operator GCE^ : 
P P for each h e Hx', and there is again the unary operator CE/i : C — ^ C for 
each h e Hx- 

The A-complete generalized condition evaluation operator GCEh allows, given 
the function efF, to evaluate conditions dependent of process behaviour. The func- 
tion eff gives, for each action a and A-complete endomorphism h, the A-complete 
endomorphism h' that represents the changed results of condition evaluation due 
to performing a. The function efF is extended to A^ such that efF((5, h) — h for 
all h e Hx- 

The additional axioms for GCE^, where h G Hx, arc the axioms given in 
Tabic [7] and axioms CE6-CE11 from Tabled 

The structural operational semantics of ACP^ extended with generalized con- 
dition evaluation is described by the transition rules for ACF^ and the transition 
rules given in Table El 

We can add both the A-complete condition evaluation operators and the gen- 
eralized A-complete condition evaluation operators to ACP^. However, Propo- 
sition 17.21 stated below makes it clear that the latter operators supersede the 
former operators. 
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Table 7. Axioms for generalized condition evaluation (a £ A^) 



GCEh(e) = e GCEIT 

GCEh(a ■ x) = a ■ GCE^ffj^ (x) GCE2 

GCEfe(x + j/) = GCEh(s) + GCEh(y) GCE3 

GCEh(<;/):-^a;) = CEh(0):^GCEh(a;) GCE4 



Table 8. Transition rules for generalized condition evaluation 



[<P] a. 



GCEh(2;) 



^ GCEeff(a,h)(x') 



The full splitting bisimulation models of ACP^ with condition evaluation 
and/or generalized condition evaluation are simply the expansions of the full 
splitting bisimulation models of ACP^, for infinite cardinals k < X, ob- 
tained by associating with each operator CE/j and/or GCEh the corresponding 
re-labeling operation on conditional transition systems. As mentioned before, 
full splitting bisimulation models with domain CTS^/^ for k > A are excluded. 

The equation CE;i(CE;j' (a;)) = CEhoh'{x) is an axiom, but the equation 
GCE/j(GCE?i' (a;)) = GCE/io/i'(a;) is not an axiom. The reason is that the lat- 
ter equation is only valid if efF satisfies efF(a, ho h') = efF(a, h) o efF(a, h') for all 
a G A and h, h' G T-l\. 

As their name suggests, the generalized A-completc condition evaluation op- 
erators are generalizations of the A-complete condition evaluation operators. 

Proposition 7.2 (Generalization). We can fix the function efF such that 



GCE/i(a;) = CE/i(a;) for all h G Hx. 

Proof. Clearly, if eff{a,h') = h' for all a G A and h' G TLx, then GCE/i(x) = 



The A-complete state operators that are added to ACPJ in Section [5] are in 
their turn generalizations of the generalized A-complete condition evaluation 
operators. 

We come back to the A-complete condition evaluation operators CE/j for 
h G Hx- The image of Cx under the A-complete endomorphism /i is a subalgebra 
of Cx that is A-complcte too. For that reason, we could have used A-complete 
homomorphisms to subalgebras that are A-complete instead of A-complete en- 
domorphisms. It would go beyond the models of the theory developed so far to 
generalize this in such a way that A-complete homomorphisms to A-complete 
Boolean algebras different from subalgebras of Cx are also included. 

However, in the case where we consider A-complete homomorphisms between 
free A-complete Boolean algebras over different sets of generators, we can relate 
the models for different choices for Cat. 



CEh{x) for ah heHx- 



□ 
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Let C and C" be different choices for Cati and let *P^'=(C) and *P^'=(C"), for 
K < A, be the fuU sphtting bisimulation models 'P^'^ of ACP^ for the different 
choices for Cat- Moreover, let /i be a A-complete homomorphism from the free 
A-complete Boolean algebra over C to the free A-complete Boolean algebra over 
C . Then h can be extended to a homomorphism h* from *P^'^(C) to *P^'^(C"). 
This homomorphism is defined by 

h*{[ (5, ^, s") - [r(5, s") u , 

where for every (a, a) G x A and a' G C^: 

= {(s, s') I 3/3 . s s' A a = , 

["'1;' ={s\3l3,s [/51;a a' = . 

It is easy to see that h* is well-defined and a homomorphism indeed. 

Thus, a A-complete homomorphism between A-complete Boolean algebras 
over different sets of generators can be used to translate conditions throughout 
a full splitting bisimulation model for one choice of Cat in such a way that a full 
splitting bisimulation model for a different choice of Cat is obtained. 

8 State Operators 

The state operators make it easy to represent the execution of a process in a 
state. The basic idea is that the execution of an action in a state has effect on 
the state, i.e. it causes a change of state. Besides, there is an action left when 
an action is executed in a state. The operators introduced here generalize the 
state operators added to ACP in pQ . The main difference with those operators is 
that guarded commands are taken into account. As in the case of the condition 
evaluation operators and the generalized condition evaluation operators, these 
state operators require to fix an infinite cardinal A. By doing so, full splitting 
bisimulation models with domain CTS^/^ for /t > A are excluded. 

It is assumed that a fixed but arbitrary set S of states has been given, together 
with functions act : A x — > Aa, eff : A x S ^ S and eval : C\ x S ^ C\, where, 
for each s G 5*, the function hg : C\ C\ defined by hs{a) — eval(a, s) is a 
A-complete endomorphism of C\. 

There are unary X- complete state operators A^ : P — )> P and As : C C for 
each s G 50 

The A-complete state operator A^ allows, given the above-mentioned func- 
tions, processes to interact with a state. Let p be a process. Then Xs{p) is the 
process p executed in state s. The function act gives, for each action a and state 
s, the action that results from executing a in state s. The function efF gives, for 

® The interesting cases are those where the cardinalities of C and C' are different. 
Otherwise, the homomorphisms are isomorphisms. 

Holding on to the usual conventions leads to the double use of the symbol A: without 
subscript it stands for an infinite cardinal, and with subscript it stands for a state 
operator. 
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Table 9. Axioms for state operators (a G Ag, rj G Cat, r/ G Cat U {±, T}) 



A.(e) = e 


SOIT 


A.(±) = ± 


S05 


Xs{a ■ x) = 


act(a,s) ■ Aeff(„_^)(3;) S02 


A.(T) = T 


S06 


Xs{x + y) -- 


= \s{x) + Xs{y) 803 


Xsiv) = v' if eval(?7, s) = 77' 


S07 


Xs{(t) x) 


= A,(<?i):^A,(a;) S04 


A,(-<?i) = ~A,(0) 


SOS 






X,{(l>UiP) = A4(?!)) U A,(7/;) 


S09 






A«((?!>nV) = Xs{(t>) n Xs{tp) 


SOlO 




Table 10. Transition 


rules for state operators 





eval((/), s) 7^ . 



[01 a , 

p — -7- — ; ^ act(a, s) 7^ (5, eval((A, s) ^ . 



each action a and state s, the state that resuhs from executing a in state s. The 
function eval gives, for each condition a and state s, the condition that results 
from evaluating a in state s. The functions act and eff are extended to Ag such 
that act((5, s) = 5 and eff {5, s) = s for all s G S'. 

The additional axioms for A^, where s G S", are the axioms given in Table [HI 
The structural operational semantics of ACP^ extended with state operators 
is described by the transition rules for ACP^ and the transition rules given in 
Table [ini 

The full splitting bisimulation models of ACP^ with state operators are sim- 
ply the expansions of the full splitting bisimulation models of ACP^ obtained 
by associating with each operator the corresponding re-labeling operation on 
conditional transition systems. 

We can add, in addition to the A-complete state operators, the A-complete 
condition evaluation operators and/or the generalized A-complete condition eval- 
uation operators from Section [7] to ACP^. 

We write ^'^^'^^^ for the expansion of ^'^^ for the A-complete condition evalu- 
ation operators, the generalized A-complete condition evaluation operators and 
the A-complete state operators. 

The A-complete state operators are generalizations of the generalized A- 
complete condition evaluation operators from Section [T] 

Proposition 8.1 (Generalization). We can fix S, act, eff and eval such that, 
for some f'-Tix S , ^f{h) (x) = GCEh{x) holds for all h G Tix in all full splitting 
bisimulation models with k < X. 

Proof. Clearly, if S* = Hx, f is the identity function on Hx, and act(a, s) — a, 
eff (a, s) — eff(a, /^^(s)) and eval(a, s) = f~^{s){a) for all a G A, s G 5 and 
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a e C\, then Ay(^)(a;) = GCE/,.(x) holds for ah h G T-Lx in ah full splitting 
bisimulation models with k < A. □ 

9 Signal Emission 

In Section [71 we made the observation that, if A is a regular infinite cardinal, 
condition evaluation by means of the A-complete condition evaluation operators 
CEh from that section is always condition evaluation of which the result can be 
determined from a set of propositions (see Remark 1 7. ip . A similar observation 
can be made about condition evaluation by means of the generalized A-complete 
condition evaluation operators GCE/j from that section. In the case of condition 
evaluation by means of CEh, the set of propositions determining the result of 
condition evaluation does not change as a process proceeds. In the case of con- 
dition evaluation by means of GCE/j, it may happen that the set of propositions 
determining the result of condition evaluation changes as a process proceeds. 
That is, the sets of propositions relevant to a process and its subprocesses may 
differ. This suggest that condition evaluation can also be dealt with by explicitly 
associating sets of propositions with processes. The intuition is, then, that all 
propositions from the set of propositions associated with a process holds at the 
start of the process. 

Clearly, if we restrict ourselves to sets of propositions of cardinality less than 
a regular infinite cardinal A, we can associate elements of Cx with processes 
instead. In line with [2], the element of C\ associated with a process is called 
the signal emitted by the process. Because _L represents the proposition F, the 
proposition that cannot hold at the start of any process, we regard a process 
with which _L is associated as an inconsistency. However, in an algebraic setting, 
we cannot exclude this inconsistency. Therefore, we consider it to be a special 
process, which is called the inaccessible processO 

The idea to associate elements of Cx with processes naturally suggests itself 
in the case where A is a regular infinite cardinal. However, there are no trammels 
to drop the restriction that A is regular. 

All this leads us to an extension of ACP^, called ACP^^, with the following 
additional constants and operators: 

— the inaccessible process constant ± : P; 

— the binary signal emission operator ^ : C x P ^> P. 

The axioms of ACP^'' are the axioms of ACPj with axioms CM2, CMS and 
GC8-GC10 replaced by axioms CM2ST, CM3S and GC8S-GC10S from Ta- 
ble [m and the additional axioms given in Table [l2l Axioms NE1-NE3 and 
SEl-SEll have been taken from [3] and axioms GC9S and GCIOS have been 
taken from [3] with subterms of the form s(a;) ^ 5 replaced by d/\{x). Axioms 

* In [1218] , this process is rather contradictory called the non-existent process. Its new 
name was prompted by the fact that after performing an action no process will ever 
proceed as this process. 
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Table 11. Axioms adapted to signal emission (a G A^) 





CM2ST 




a ■ X [|_ y = a • 


II y) + c»A(y) CM3S 




(S t') I 11 = d 


■ (a; II + ^aCw') GC8S 




(d) >■ x) \ y = (j) 


(a; 1 y) + 9A(y) GC9S 




2: (0 y) = 


:^ (a; 1 y) + aA(a;) GCIOS 




Table 12. Additional 


axioms for signal emission {a £ As) 




a; + ± = ± NEl 


<;/> ^ (V' ^ a;) = (<;/> n V) ^ a: 


SE5 


± • a; = ± NE2 


(f) ^ {(f) -.-^ x) ^ (f) ^ X 


SE6 


a ■ ± = 5 NE3 


(j) -.^ {tl; ^ x) = {-(j) U V) ^ (0 a:) 


SET 


T ^ a; = a: SEl 


(<;/> ^ a:) li y = ^ (x li y) 


SE8 


± ^ a: = ± SE2 


(<;/> ^ a;) 1 y = <;/> ^ (x 1 y) 


SE9 


(;/)^a: + y = (;/)^(a: + y) SE3 


x\{4>^y)^<t)^{x\y) 


SEIO 


{(j>'^x)-y^(f)'-^x-y SE4 


dH{4> ^x)^<j,^ dnix) 


SEll 



CM2ST, CM3S and GC8S differ really from the corresponding axioms in [3] due 
to the choice of having as the signal emitted by the left merge of two processes, as 
in the case of the communication merge, always the meet of the signals emitted 
by the two processes. 

In the structural operational semantics of ACP^^, unary relations s", one for 

each a e C \ {_L}, are used in addition to the relations ["'j, and A. We write 
s{p) ~ a instead of p £ s". The relation s" can be explained as follows: 

— s{p) — a: p emits the signal a. 

The structural operational semantics of ACP^'^ is described by the transition 
rules given in Table [131 These transition rules include all transition rules from 
Table [2] with additional premises to exclude transitions from or to processes that 
emit the signal X. There are additional transition rules describing the signals 
emitted by the processes. The transition rules for signal emission are new as 
well. 

The following gives a good picture of the nature of signals and conditions. 
Proposition 9.1 (Signals and conditions), //((a)) h ((/3)) <^ ((/3')}, then 

Proof. The proof is the same to the proof of the corresponding proposition in 
the setting of ACP'^'' given in [TO]. □ 

We have the following corollaries from Proposition 19. II 

Corollary 9.1. // ((a)} h then a ^ x) = a ^ x. If {(a)) I . {{13)), 

then a^{^:^x)^a^6. 
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Table 13. Transition rules for ACP^' 



X l't'\, s{x + y)^l. y \'t'\, six + y)^. 



x + y\'l'\ x + y 

x^x',s(x + y)^± yM^y',s{x + y)^. 



x + yM^x' x + y^y' 

X [■flj,, y l-flj, X [-^li, y y' x ^ x' 



x.y\<^^^\ x-y^^^y' x-y^x'-y 
X X ^ x' 



X I<*l4., s(V ^ a:) ^ ± X x', 5(^6 ^ a;) ^ 



^^xl^\ ^r^x ^ x' 

X W^, y s(a; \\y)^l. 
d>nih ^ 1. 

X II y yt'"*\ 

X x', sjx II y) + ±, s{x' \\y) + ^ y ^ y' . s(x || y) ^ ±, s(x \\y')i^^ 

2: II J/ > ^ II J/ a: II 2/ ^ x\\y 

x\^x',y^ y', sjx \\ y) ^ ±, sjx' \\ y') + ± 

xWy^^^^x' II y' 
x^x', s(x|Ly)7^±, 5(3;' ||y)^± 

xU^x' \\y 
xMji^x'.y^ y', sjx \y)^±, sjx' \\ y') + . 
x\y\^^x' \\y> 
X X ^ x' 

a4H 



a|6 = c, 0ni/'7^- 



a|6 = c, (^rii/'^- 



s(a;) = 0, s(i/) = V 
s(±) = ± s{e) = T s(a) = T s(a; + ?/) = c?i n V 

s(a;) = s(.r) = <> s(,r) = p 



s(a; ■ y) = cj) s{il} :— >■ y) = —ip U (/> s(V' ^ y) = V' n ^ 

s(x) = fli, s(j/) = 1/) s{x) = s{j/) = V s(x) = s{y) = tp s{x) ■ 



s{x \\ y) = <j> n Ip s{x Hy) = <j>n^ s{x \ y) = <j> n tp s(9h (x)) = <p 



Corollary 9.2. Ifeff{h,a) is the identity endomorphism on C for all endomor- 
phismsh onC and a € A, then we have GCEh^((a))y{§.'^x) = ^:^GCEh^^^^^^y{x) 
implies a ^ :->• a;) = a ^ :-)■ a;). 
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10 Full Signal-Observing Splitting Bisimulation Models 
of ACPf 

In this section, we introduce conditional transition systems with signals, signal- 
observing splitting bisimilarity of conditional transition systems with signals, 
and the full signal-observing splitting bisimulation models of ACPJ''. 

Conditional transition systems with signals generalize conditional transition 
systems. 

Let K be an infinite cardinal. Then a K-conditional transition system with 

signals T is a tuple (5, — >, J,, s, s") where 

— {S, — >-,4,, s°) is a K-conditional transition system; 

— s is a function from 6" to C^; 

and for all £ e C~ x A and a G C ~ : 

- {(s, s') e 4 I s(s) = ± V s(s') = ±} = (D; 

- {s G H I s(s) = _L} = 0. 

We say that s(s) is the signal emitted by the state s. 

For conditional transition systems with signals, reachability and connected- 
ness are defined exactly as for conditional transition systems. 

Let {S, — 4-, s, s°) be a K-conditional transition system with signals (for an 
infinite cardinal k) that is not necessarily connected. Then the connected part of 
T, written T{T), is simply defined as follows: 

T{T) = {S\^',i',s',s°), 
where 

s' is the restriction of s to 5" . 

Let K be an infinite cardinal. Then CTS" is the set of all K-conditional 
transition systems with signals (5, — J,, s, s°) for which (5, — i, .s") G CTS^. 

Isomorphism between conditional transition systems with signals is defined 
as between conditional transition systems, but with the additional condition 
that Si(s) = 82(6(5)). Splitting bisimilarity has to be adapted to the setting with 
signals. 

Let Ti = (5i,->i,;i,si,,s?) e T2 = (^2, ^2, ia, S2, e CT§- (for 

an infinite cardinal k). Then a signal- observing splitting bisimulation B between 
Ti and T2 is a binary relation B C Si x S2 such that S(s°, 5°) ^^'^ for all Si, S2 
such that B{si,S2)'- 

- si(si) = S2(.S2); 

— if si ^"^ °> i s'l, then there is a set CS'2 ^ C~ x 6*2 of cardinality less than k 

r '1 

such that Si(si) n a C |Jdom(CS'2) and for ah (a', 53) € CS'2, ^2 > 2 S2 
and B{s'i, s'2); 
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— if S2 >2 s'2, then there is a set CS[ x Si of eardinahty less than k 

such that 52(52) Ha C |J dom(CS'( ) and for aU {a',s[) e CS[, si ^" ^°> i s[ 
and B{s[,s'2); 

— if Si ["1-1-1, then there is a set C" C C~ of cardinaUty less than k such that 
si(si) n a C □ C" and for all a' G C, S2 

— if S2 '"'-1-2; then there is a set C" C of cardinality less than k such that 
S2(s2) n a C yc" and for all a' G C", si ["'l^i- 

Two conditional transition systems with signals Ti,T2 G CTS^^ are signal-ob- 
serving splitting bisimilar, written Ti T2, if there exists a signal-observing 
splitting bisimulation B between Ti and T2. Let -B be a signal-observing split- 
ting bisimulation between Ti and T2. Then we say that B is a splitting signal- 
observing bisimulation witnessing Ti T2. 

It is straightforward to see that is an equivalence on CTS^®. Let T G 
CTSf . Then we write [T]^= for {T' G CTS^" | T T'}, i.e. the -equivalence 
class of T. We write CTS^'^/^'' for the set of equivalence classes {[T]^" | T G 

The elements of CTS" and operations on CTS^** to be associated with the 
constants and operators of ACP^ are as the elements of CTS% and operations 
on CTS^ associated with them, but with all relations and restricted to 
states that emit a signal different from ± and with the additional function s as 
suggested by the structural operational semantics of ACP^''. 

We associate with the additional constant _L an element _L of CTS^^ and 
with the additional operator ^ an operation ^ on CTS^'* as follows. 

r = ({5°}, 0,0, 5,5°), 

where 

s(sO) = ± . 

— Let T = (5, i, s, s°) G CTS^^^ Then 

where 

s'(s) = s(s) for s G 5 \ {s°} , 

s'(sO) =ans(s") , 

and for every (a, a) G x A and a' G C~: 

= {{s, s') I s s' A s'(s) A s'(s') 7^ ±} , 

["V = {s I s ["'1;a s'(s) ^ ±} . 

We can easily show that signal-observing splitting bisimilarity is a congruence 
with respect to the operations on CTS^'^ associated with the operators of ACP^**. 
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Proposition 10.1 (Congruence). Let k be an infinite cardinal. Then for all 
Ti,T2,T[,T^ e CTS^ and a eC^,Ti^ T[ and T2 imply Ti + T2 ^ 

T{ + T'2, Ti ^' T2 T{ T^, a i-^' Ti a T{, a Ti ^' T[, 

Tit T2 Ti fT^,Ti f T2 Ti f T^, Ti f T2 Ti T and Oh (Ti) 
dH{Ti). 

Proof. For i'^", |f°, and witnessing signal-observing splitting 

bisimulations are constructed in the same way as witnessing splitting bisim- 
ulations are constructed in the proof of Proposition 14.11 What remains is to 
construct a witnessing signal-observing splitting bisimulation for ^ . Let i? be a 
signal-observing splitting bisimulation witnessing Ti Ti. Then we construct 
a relation as follows: 

— Rfi" = Rn {S X S'), where 5* and S' are the sets of states of a Ti and 
a ^ T{, respectively. 

Given the definition of signal emission, it is easy to see that is a signal- 
observing splitting bisimulation witnessing a ^ Ti a ^ Ti. □ 

The ingredients of the full signal-observing splitting bisimulation models CP^"^** 
of ACPg^, one for each infinite cardinal k, are defined as follows: 



V 




= CTt 










J. 




= [T 




a :^° [ri]^= 




[a:'^°ri]^s 


r 




= [r 








[a^'Ti]^s . 
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e 




= [r 




[TiW?[T2: 


y - 


[T1TT2W 
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a 




= [r 
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{TiWT[T2 


w = 


[T1TT2W 




[T2W 


-[Ti 


+ T2W , 
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[T1TT2W 




[T2W 






9^^([riW) 




[5^^(ri)W 



The operations on CTS^^/^'^ are well-defined because is a congruence with 
respect to the corresponding operations on CTS^''. 
The structures ^i"^"^ are models of ACF^''. 

Theorem 10.1 (Soundness of ACP^**). For each infinite cardinal k, we have 

h Acpr. 

Proof. Because is a congruence, it is sufficient to show that all axioms are 
sound. The soundness of all axioms follows straightforwardly from the definition 
of »^3^'=^ □ 

For all axioms that are in common with ACP'^^, the proof of soundness with 
respect to follows the same line as the proof of soundness with respect to 
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Table 14. Axioms adapted to retrospection {a £ As) 



a-xly ^a - {x\\a+{y)) CM3R 



Table 15. Additional axioms for retrospection {a £ Ag , £ Cat) 



~_L = _L 






Rl 


n>„(a- a;) = 


a-n^n+i(«) 


RS2 


~T = T 






R2 


ntni^ + y) = 


= n+„(x) + n+„(y) 


RS3 








R3 


n+„(0:^x) 


= n+„(</>) :->n+„(x) 


RS4 




= U . 




R4 






RS5 


r^{(t> n tp) 


= n . 




R5 


nJn(T) = T 




RS6 


a ■ {^cj> :- 


^ x) = 






njn('7) = ^ 




RS7 


(p :— >■ a 




'■.^ a ■ S 


R6 


n+„(-0) = - 


-n+„(<^) 


RS8 












= n+„(,/<)un+„w 


RS9 










n+„(<^nv) = 


= n+j,/<)nn+„w 


RSIO 


n+ix) = 






RSO 


n+,(.<^) = . 


(~<^) 


RSll 


n^Je) = 






RSIT 


nJn+i(-0) = 


-- ~n+„(0) 


RS12 



11 ACPe with Retrospective Conditions 

In this section, we present an extension of ACP^ with a retrospection operator 
on conditions. The retrospection operator allows for looking back on conditions 
under which preceding actions have been performed. The extension of ACP^ 
with the retrospection operator is called ACP" . 

ACP" has the constants and operators of ACF^ and in addition: 

— the unary retrospection operator ~ : C — > C; 

— the unary retrospection shift operator 11+ : P — P; 

— for each n £ N, the unary restricted retrospection shift operator n^„:P — s> P; 

— for each n G N, the unary restricted retrospection shift operator n^„:C — s> C. 

In the parallel composition of two processes, when an action of one of the pro- 
cesses is performed, the retrospections of the other process that are not internal 
should go one step further. This is accomplished by the retrospection shift oper- 
ator. The restricted retrospection shift operators, on processes and conditions, 
are needed for the axiomatization of the retrospection shift operator. The ret- 
rospection shift operator 11+ is similar to the history pointer shift operator hps 
from [4]. 

The axioms of ACP" are the axioms of ACP^ with axiom CMS replaced by 
axiom CM3R from Table [T31 and the additional axioms for retrospection given 
in Table [T5] The crucial axiom is R6, which shows that a conditional expression 
of the form :— p gives a retrospection at the condition under which the 
immediately preceding action has been performed. Axiom CM3R shows that 
retrospections are adapted if two processes proceed in parallel. Axioms RSO, 
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Table 16. Transition rules adapted to retrospection 



[ct>]a 



y > y 



I 14'] / 



n+(j/) 



RSIT and RS2-RS12 state that this happens as explained above. By means 
of axioms RS5-RS12, the retrospection shift operators on conditions can be 
eliminated from all terms of sort C. 

Recall that we write p q for C:— >pH — ( -.—^ q. An interesting equation 

is a • (x < ~(/) t> y) — a ■ x <\ (j)\> a ■ y. This equation is a generalization of axiom 
R6: axiom R6 is derivable from the other axioms of ACP" and this equation 
by substituting 5 for y and applying axioms GC3 and A6. It is not immediately 
clear that this equation is derivable from the axioms of ACP". 

Proposition 11.1 (Derivability Generalization Axiom R6). The equation 
a ■ {x <\ ~0 1> y) — a ■ X <i (j)t> a ■ y (R6') is derivable from the axioms of AGP". 

Proof. The proof is the same to the proof of the corresponding proposition in 
the setting of ACP'^' given in [TO]. □ 

Because of the addition of the retrospection operator, we cannot use the 
Boolean algebras here. The algebras CI. that we use here can be character- 
ized as the free K-complete algebras over Cat from the class of algebras with 
interpretations for the constants and operators of Boolean algebras and the ret- 
rospection operator that satisfy the axioms of Boolean algebras (Table [1]) and 
axioms R1-R5 from Table [TH We do not make this fully precise, but give an 
explicit construction of the algebras instead. Important to bear in mind is 
that not only the atomic conditions, but also the results of applying the op- 
eration associated with the retrospection operator a finite number of times to 
atomic conditions, should not satisfy any equations except those derivable from 
the axioms. 

Let Cgt ~ Ui^at X {i} I i G a;} and define prev : C^j — > Cg^ by prev((?7, i)) = 
(j],i -\- 1). For any infinite cardinal k, let C)^ be the free K-complete Boolean 
algebra over C^j. Then the function prev extends to a unique K-complete en- 
domorphism prev* of C'l^. This endomorphism is a unary operation on C'l^ that 
satisfies axioms R1-R5 from Table [15] and preserves |J C" for every C" C 
of cardinality less then k. The algebra is the expansion of obtained by 
associating the operation prev* with the operator ~. We write C for CJ^^ . 

The structural operational semantics of ACP™ is described by the transition 
rules for ACP^ with the second and third transition rule for parallel composition 
and the one transition rule for left merge replaced by the transition rules given in 
Table [TO] and the additional transition rules for retrospection given in Table [T71 
Of course, the conditions involved are now taken from C instead of C. 
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Table 17. Additional transition rules for retrospection 





X ) X 


11+ (x) in>oW)li 


n+(.) P^n+,(.') 

[<t>] a, 1 
X >■ X 


n+„(.) P5n(^)i4 


nJJ.)i<^n+„,,(.') 



12 Full Retrospective Splitting Bisimulation Models of 
ACPf 

The construction of the full splitting bisimulation models of ACP^'^ differs from 
the construction of the full splitting bisimulation models of ACP^ in the condi- 
tions involved and in the notion of splitting bisimulation used. The conditions 
are now taken from instead of C^. Henceforth, we write for \ {-L}. 

Let K be an infinite cardinal. Then a k- conditional transition system with 
retrospection T consists of the following: 

— a set 5 of states; 

— a set A C S X S, for each £ e x A; 

— a set ["I4, C S, for each a € C^"; 

— an initial state s° G S. 

For conditional transition systems with retrospection, reachability, connect- 
edness and connected part are defined exactly as for conditional transition sys- 
tems. 

Let K be an infinite cardinal. Then CTS^'' is the set of all connected k- 
conditional transition systems with retrospection T = {S, — >■, 4-, s°) such that 
S C Sk and the branching degree of T is less than k. 

Isomorphism between conditional transition systems with retrospection is 
defined exactly as for conditional transition systems. Splitting bisimilarity has 
to be adapted to the setting with retrospection. 

Let Ti = (S'i,^i,;i,s;) e CTS%' and T2 = (fi-a, ^2,12, s^) e CTS^'' (for 
an infinite cardinal k). Then a retrospective splitting bisimulation B between Ti 
and T2 is a ternary relation B S\xCl.x S2 such that B{s\, T, Sj) and for all 
si, /?, S2 such that i?(si, /3, S2): 

— if s\ °> 1 s'l^ then there is a set CS2 C C^^ x ^2 of cardinality less than n 

such that a n /3 C □dom(C5'2) and for all (a', s'2) G CS2, S2 ^" ^°> 2 s'2 and 
B(s'i,~a',s'2); 

— if S2 °> 2 s'2, then there is a set CS^ C x S\ of cardinality less than k 

such that a n ,5 C □dom((7S'0 and for all (a', s'l) e CS[, si -^^i s'l and 

BK,~a',4); 
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— if Si then there is a set C C C], of cardinahty less than n such that 
a n /3 C U C" and for all a' £ C", S2 '"''la; 

— if S2 '"1^,2 J then there is a set C" ^ ~ of cardinality less than k such that 
a n /3 C U C" and for all a' G C", si ["'Iji. 

Two conditional transition systems with retrospection Ti , T2 G CT§" are ret- 
rospective splitting bisimilar, written Ti T2, if there exists a retrospective 
splitting bisimulation B between Ti and T2. Let _B be a retrospective splitting 
bisimulation between Ti and T2. Then we say that i? is a retrospective splitting 
bisimulation witnessing Ti Ta- 

It is straightforward to see that is an equivalence on CTS^''. Let T G 
CT§%'. Then we write [Tj^r for {T' G CTS^'' | T T'}, i.e. the -equivalence 
class of T. Wc write CTS"'/^' for the set of equivalence classes {[T]^r | T G 

The elements of CTS^'' and operations on CTS"' to be associated with the 
constants and operators of ACP^ are defined exactly as the elements of CTS^ and 
operations on CTS^ associated with them, except for ||, [[ and |. The operations 
on CTS^'' that we associate with ||, [[, |, 11+ and n>„ call for unfolding of 
transition systems from CTS" . 

For the sake of unfolding, it is assumed that, for each infinite cardinal k, 5^ 
has the following closure property j^l 

for ah 5 C 5„, {vr ^ (s) | tt G (5* x (C^ x A))*, s e S} C . 

We write P'(5) for the set {tt ^ (s) | tt G (5 x (C^ x A))*, s G S*}. The function 
# : P'(5) ^ N is defined by 

The elements of P'C-S*), for an 5 C iSk, can be looked upon as potential paths 
of a K-conditional transition system with S as set of states. A path of a transition 
system {S, -^,-1, s") G CTS^'' is a finite alternating sequence {sq, ^i, si, . . . , £„, s„) 

of states from S and labels from x A such that so = and Si -^i±i> Si+i for 
all i < n. The state s„ is called the state in which the path ends. 

Let T = (5, -^,1, s°) G CTS^''. Then the set of paths of T, written P(T), is 
the smallest subset of P'(S') such that: 

- (■^") e P(T), 

- if TT ^ (s) G P(r) and s A s', then tt ^ (s, £, s') G P(r). 

In order to unfold a transition system, we need for each state s of the original 
transition system, for each different path that ends in state s, a different state in 

^ We write ( ) for the empty sequence, (e) for the sequence having e as sole element 
and a ^a' for the concatenation of sequences a and a'; and we use (ei, . . . , e„) as a 
shorthand for (ei) ^ . . . ^ i^n)- 
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the unfolded transition system. The obvious choice is to take the paths concerned 

as states. 

Let T = {S,^,i,s°) e CTS^''. Then the unfolding of T, written T(r), is 
defined as follows: 

T(r) = (5',-^',;',s"'), 

where 

S' = P{T) , 

and for every £ G x A and a € C^~: 

4' = {(7r^(s),7r^(s,^,s')) |7r^(s) eP(T),s4s'}, 
M4' = {tt ^ (s) I TT ^ (s) G P(T), s H;} , 

The functions upd^ and upda defined next will be used in the definition of 
parallel composition on CT§" to adapt the retrospection in steps originating 
from the first operand and the second operand, respectively. 

Let Si,S2 C Sr^. Then the functions upd^ : C^' x P' {Si x S2) ^ , for 
i = 1,2, are defined by 

updi(Q!, ((si, ,S2))) =a, 

upd,(a, {{si,S2),i, is'i,s'2)) ^n') = updj(a, {{s'l, s'2)) ^ n') if Sj 7^ s • , 
wpdi{a, {{si, S2),£, {s[, s'2)) ^ n') = 

^P'^i0^t#M{s[,s',))^n')i^)' (K>S2)) if Si = s< . 

where 

#.(((S1,S2))) =0, 

#i(((si,S2),A -tt') = ^^') + 1 if Si 7^ , 

#i(((si,S2),^,(s'i,s'2)) -Tt') = #i(((si,s'2)> -Tt') if Si = S^ 

Henceforth, we write upd(Q;i, a2) tJ") for upd]^(ai,7r) □ upd2(a2) tt). 

Wc; proc;ced with associating operations on CTS" with the operators ||, [[, |, 

n+ and n+„. 

We associate with the additional operator || an operation || on CTS^'' as 
follows. 

- Let Ti,T2 G CTS^'. Suppose that T(Ti) = {Si,^i,ii,s^) for i = 1,2, and 
T(T(Ti)f T(T2)) = {S,^,i,s°). Then 

Tj'T2 = (5,^',i',sO), 

where for every (a, a) G C^^ x A and a" G C^^: 
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^' = {(7r-((si,S2)),7r'-(K,4))) A S2 = 4 A 

V (7r-((si,S2))^7r'-(K,4)) A 

"'ec^" updi(a',7r'-v ((si,s2))) a)} 

U {(7r^((si,S2)),7r'^((s'i,s'2))) | Si = s[ A S2 7^ 4 A 

V (7r-((5i,52))^7r'-((5l,5'2)> A 

"'^''^^ upd2(a',^-((si,S2)))=a)} 
U{(7r-((5i,52)>,7r'-(K,4))) 

V (^-((si,S2))J^^^^' 4)) A 

upd(a',/3',7r^ ((si,S2)» = a A 

a'\b' = a)} , 

KV ={7r-((si,s2)) I 

V ^ ((si, S2)> ["'^'^'li A Si A S2 ^^\2 A 
«'./3'eCi- upd(a', w ^ ((si, S2))) = a")} • 

Remark 12.1. The operation ||' on CTS^'' is defined above in a step-by-step way. 
The basic idea behind this definition is twofold: 

— Ti II' T2 can be obtained by first composing Ti and T2 to Ti || T2 and then 
adapting the retrospections in steps of Ti || T2; 

— unfolding of Ti || T2 is needed before the actual adaptations can take place 
because the adaptation of the retrospection in a step may be different for 
the different paths that end in the state from which the step starts. 

Somewhat surprisingly, in addition, Ti and T2 must be unfolded before the actual 
composition takes place. In a step where an action of Ti and an action of T2 
are performed synchronously, the condition under which the action of Ti can be 
performed and the condition under which the action of T2 can be performed are 
needed to adapt the retrospection in that step correctly. If Ti and T2 are not 
unfolded before the actual composition takes place, in general, those conditions 
cannot be determined uniquely. 

The operations on CTS" to be associated with the additional operators |[ and 
I are defined analogously. The operations on CTS^'' to be associated with the 
additional operators Oh are defined exactly as the operations on CT§^ associated 
with them. We associate with the additional operators n>„ operations n>„' on 
CTS^^ as follows. 

— Let T G CTS^^ Suppose that T(T) = {S, s°). Then 
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where for every (a, a) e x A and a" G : 
i^' = {(7r-(,s),V-(s')) I 

The operation on CTS^'' to be associated with the additional operator 11+ is the 
same as the operation on CTS" associated with II^q. 

We can show that retrospective splitting bisimilarity is a congruence with 
respect to the operations on CTS" associated with the operators of ACP™. 

Proposition 12.1 (Congruence). Let k be an infinite cardinal. Then for all 
Ti,T2,Ti,T^ e CTS^'' and a e C^, Ti T[ and T2 imply Ti + T2 

T{ + T^, Ti ^' T2 Ti ^' Ti, a Ti a Ti, Ti f T2 Ti f T^, 
Ti t T2 Ti I' T^, Ti T' T2 Ti T T^, dn'iTi) dn'^Ti), B+\Ti) 
n^'(T{) andU+,:iT^)^' U+,:{Ti). 

Proof. For all operations, witnessing splitting bisimulations are constructed in 
the same way as in the congruence proofs for the corresponding operations on 
CT§^ given in [TU]. □ 

The ingredients of the full retrospective splitting bisimulation models 'P™'^ of 
ACP!;'^, one for each infinite cardinal k, are defined as follows: 
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The operations on CTS^''/^'^ are well-defined because is a congruence with 
respect to the corresponding operations on CTS^''. 
The structures ^'^^'^ are models of ACP" . 

Theorem 12.1 (Soundness of ACP"). For each infinite cardinal k, we have 

h Acpf. 

Proof. Because is a congruence, it is sufhcient to show that all axioms are 
sound. The soundness of all axioms follows straightforwardly from the definition 

of^pr. □ 
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For all axioms that are in common with ACP'^' , the proof of soundness with 
respect to 'P^'^'' follows the same line as the proof of soundness with respect to 

In the full retrospective splitting bisimulation models of ACP^"^, guarded 
recursive specifications over ACPg"^ have unique solutions. 

Theorem 12.2 (Unique solutions in 'P^'^'). For each infinite cardinal k, 
guarded recursive specifications over ACP" have unique solutions in 'P™'^. 

Proof. The proof is analogous to the proof of the corresponding property for the 
full retrospective splitting bisimulation models of ACP'^' given in [TUl. □ 

Thus, the full retrospective splitting bisimulation models 'P"'^' of ACP" with 
guarded recursion are simply the expansions of the full retrospective splitting 
bisimulation models Cp^'^'' of ACP" obtained by associating with each constant 
{X\E) the unique solution of E for X in the full retrospective splitting bisimu- 
lation model concerned. 

13 Evaluation of Retrospective Conditions 

In this section, we add condition evaluation operators and generalized condition 
evaluation operators to ACP". As in the case of ACP^, these operators require 
to fix an infinite cardinal A. By doing so, full retrospective splitting bisimulation 
models with domain CTS"/^"^ for k > X are excluded. 

Henceforth, we write for the set of all A-complete endomorphisms of C\ . 

In the case of ACP", there are A-complete condition evaluation operators 
CE/i : P — > P and CE/j : C — s> C, and generalized A-complete condition evaluation 
operators GCE/i : P — > P and GCE/i : C ^ C, for each h G Ti^. We also need the 
following auxiliary operators: 

— for each h e Ti^, n G N, the unary retrospection update operator nJj:P P; 

— for each h G T-Lj^, n G N, the unary retrospection update operator nJ^:C — )■ C. 

In the case of ACP" , it is assumed that a fixed but arbitrary function efF : 
A X TL'x T-L\ has been given. The function eff is extended to As such that 
eff((5, h)^h for all he HI- 

The condition evaluation operators and generalized condition evaluation op- 
erators cannot be added to ACP" in the same way as they are added to ACP^. 
First of all, retrospective conditions may refer back too far to be evaluated. The 
effect is that, in condition evaluation or generalized condition evaluation of a 
process according to some endomorphism, the retrospective conditions that re- 
fer back further than the beginning of the process have to be left unevaluated. 
This is accomplished by the retrospection update operators mentioned above. In 
the case of generalized condition evaluation, there is another complication. Recall 
that generalized condition evaluation allows the results of condition evaluation to 
change by performing an action. In the presence of retrospection, different parts 
of a condition may have to be evaluated differently because of such changes. 
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Table 18. New axioms for (generalized) condition evaluation {a £ As) 



CEft(e) = e 




CEIT 


CEh(a ■ x) = 


a-CEH{n1{x)) 


CE2R 


CEh{x + y) = 


-- CEh{x) + CEh{y) 


CE3 


CEh(0 -.^ x) 


= n^{<P) -.^CEhix) 


CE4R 


GCE^i^) = e 




GCEIT 


GCEh(a • x) = 


= a ■ GCEeff(a,h)(n5'(x)) 


GCE2R 


GCEh{x + y) 


= GCEh(x) + GCE;,(j/) 


GCE3 


GCEh{4> :— > X 


) = n,'}(0) :^GCE„(a;) 


GCE4R 



Table 19. Axioms for retrospection update (a G Af , 77 G Cat, ??' G Cat U {_L, T}) 
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nS(r;) = v' 


if /i(77) = r?' 


RU7 
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a-a'^+^{x) 


RU2 






RU8 


Tl'^{x + y) = 


= n:^(a;) + n:;(y) 


RU3 




-n::(0) 


RU9 


n'^.icp -.^ x) 




RU4 


n::(<^uv') 


= n:j(<^)un:i(^) 
= n:^(<^)nn;i(^) 


RUlO 
RUll 


nUl-) = 1- 




RU5 


u^{^<p) = 




RU12 


n:j(T) = T 




RU6 


n::+i(~0) 




RU13 



The effect is that, in generalized condition evaluation of a process according to 
some endomorphism, after an action of the process is performed, the subsequent 
retrospective conditions that refer back to the beginning of the process have to 
be evaluated according to that endomorphism as well. This is also accomplished 
by the retrospection update operators mentioned above. 

In the case of ACP", the additional axioms for CE/i and GCE/j, where h G H\, 
are the axioms given in Tables [18] and [TH These additional axioms differ from 
the additional axioms in the absence of retrospection (Tables[5]and[7|) in that ax- 
ioms CE2, CE4, GCE2 and GCE4 have been replaced by axioms CE2R, CE4R, 
GCE2R and GCE4R, and axioms CE6-CE11 by axioms RUIT and RU2-RU13. 
Axioms CE2R and CE4R, together with axioms RUIT and RU2-RU13, show 
that, in condition evaluation of a process, retrospective conditions that refer back 
further than the beginning of the process are not at all evaluated. Similarly, ax- 
ioms GCE2R and GCE4R, together with axioms RUIT and RU2-RU13, show 
that, in generalized condition evaluation of a process, retrospective conditions 
that refer back further than the beginning of the process are not at all evalu- 
ated. Moreover, axiom GCE2R, together with axioms RUIT and RU2-RU13, 
shows that, in generalized condition evaluation of a process according to some 
endomorphism, after an action of the process is performed, the subsequent retro- 
spective conditions that refer back to the beginning of the process are evaluated 
according to that endomorphism as well. 
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Table 20. New transition rules for (generalized) condition evaluation 

X ^ x' 

^ nff(0)7^± n'j(«i)7^± 

CE,(.)K(«]4 cE,{.)JH^CE,(n^(.')) 

X [^li X ^ x' 



a; [■^14. X ^ x' 

n^W^^ ^^^^^ n^W^- 



The structural operational semantics of ACP" extended with condition eval- 
uation and generalized condition evaluation is described by the transition rules 
for ACP" and the transition rules given in Table [501 

The full retrospective splitting bisimulation models of ACP" with condition 
evaluation and/or generalized condition evaluation are not simply the expansions 
of the full retrospective splitting bisimulation models ^P^'^'' of ACP" , for infinite 
cardinals k < A, obtained by associating with each operator CE/i and/or GCE?i 
the corresponding re-labeling operation on conditional transition systems with 
retrospection. As suggested by the structural operational semantics of ACP" 
extended with condition evaluation and generalized condition evaluation, these 
re-labeling operations have to be adapted in a way similar to the way in which 
parallel composition had to be adapted to the case with retrospection in Sec- 
tion [T2I As mentioned before, full retrospective splitting bisimulation models 
with domain CTS"/^"^ for k > A are excluded. 

Proposition l7.2l stating that the generalized A-complete condition evaluation 
operators supersede the A-complete condition evaluation operators in the setting 
of ACP^, goes through in the setting of ACP". 

Adding state operators to ACP" can be done on the same lines as adding 
generalized evaluation operators to ACP", but is more complicated. Roughly 
speaking, signal emission can be added to ACP" in the same way as it is added to 
ACPJ provided that signals are taken from C. No adaptations like for generalized 
condition evaluation are needed because signal emission corresponds to condition 
evaluation that does not persist over performing an action. This property also 
points at one of the differences between the signal-emission approach to condition 
evaluation and the other approaches treated in this paper: retrospection has to 
be resolved in the signal-emission approach before condition evaluation can take 
place. The case where signals are taken from C is expected to be too complicated 
to handle. 



14 An Application of ACP^"^ 

The ultimate applications of a process algebra that includes conditional expres- 
sions of some form are the ones that remain entirely within the domain of process 
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Table 21. Additional axioms for last action conditions (a £ A) 



a ■ X — a ■ {J'a :— >■ x) J 



Table 22. Axioms adapted to last action conditions (a, 6 G A^, c G A) 



a-x\b-y = {a\b)-(n^o{x)\\K{y)) 
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algebra. Such applications are by their nature extensions as well. We outline one 
interesting application of this kind in the setting of ACP" . 

We take the set {j7o | a G A} of last action conditions as the set of atomic 
conditions Cat- The intuition is that J7a indicates that action a is performed just 
now. The retrospection operator now allows for using conditions which express 
that a certain number of steps ago a certain action must have been performed. 

Because we remain entirely within the domain of process algebra some ad- 
ditional axioms are needed. They are given in Table [21] Moreover, axioms CM7 
(Table [1]) and RS7 (Table [15]) must be replaced by axioms CM7J and RS7Ja- 
RS7Jb from Table [22l Axiom CM7 must be replaced by axiom CM7J because, 
after performing a | 6, it makes no sense to refer back to the actions performed 
just now by the processes originally following a and b in the process following 
a \ b. Retrospective conditions in the process originally following a that indi- 
cate that a is performed just now should be evaluated to T and the ones that 
indicate that another action is performed just now should be evaluated to _L. 
Retrospective conditions in the process originally following b should be evalu- 
ated analogously. This is accomplished by the auxiliary operators 11° : P — P 
and n° : C C (for each a G As and n G N) of which the defining axioms 
are LAUIT and LAU2-LAU14 from Table [H Axiom RS7 must be replaced 
by axioms RS7Ja and RS7Jb because of the retrospective nature of last action 
conditions. We mean by this that J^a can be viewed as a condition of the form 
~r/, where rj indicates that action a is performed next. We have not introduced 
corresponding atomic conditions because their use without restrictions would be 
problematic in alternative composition. 

From the axioms of BPA^^ and the additional axiom J, we can derive the 
equation a-x+b-y = {a+b)-{J'a'-^x+Jb'-^y)- It can be used to reduce the number 
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of subprocesses of a process. For example, a ■ (ai • a'j^ + 02 • ftj) + 6 • (61 • b'^ + 62 • ^2) = 
{a+b)iJa:^{al+a2)iJa^:-^a[+Ja^:^a'^)+Jb:^{bl+b2)■{Jb^■■^b[+Jb^:->■b'2)) 
shows a reduction from 7 subprocesses to 4 subprocesses. 

In order to obtain the full retrospective splitting bisimulation models of the 
extension of ACP" with last action conditions, retrospective splitting bisimi- 
larity has to be adapted: in the definition of retrospective splitting bisimula- 
tion (see Section [T^ . the two occurrences of B{s'i, ~a', Sj) must be replaced by 
Bis[,~a' nja,s'2). 

The operators are reminiscent of the operators Iljj. In fact, if we would 
exclude full retrospective splitting bisimulation models with domain CTS" /^"^ 
for K greater than some infinite cardinal A, 11^ could have been replaced by Iljj" , 
where ha £ H'x for a e A is defined by ha{Ja) — T and ha{Jb) — ^ it a b and 
hs G Wx is defined by hs{Ja) = -L. 

We conclude with an example of the use of the retrospection operator to- 
gether with last action conditions. 

Example 14- 1- The example concerns a service that resembles the services con- 
sidered in |9|llj . For any command m from some set M, the service can be 
requested to process command m and it can be requested to report back what 
the reply would be to the request to process command m. We suppose that the 
service can be described by a function F:M^ — > {T, F, B} with the property that 
F{a) = B ^ F{a ^ {m)) ~ B. This function is called the reply function of the 
service. Given a reply function F and a command m, the derived reply function 
of F after processing m, written -^F, is defined by ^F(a) = F{{m)^a). The 
connection between a reply function F and the service described by it can be 
understood as follows: 

— if F{{m)) ^ B, the request to process command m is accepted by the service, 
the reply is F{{m)) and the service proceeds as described by -^F; 

— if F{{m)) = B, the request to process command m is not accepted by the 
service, the reply is F{{m)) and the service proceeds as described by F; 

— the request to report back what the reply would be to the request to process 
command m is always accepted by the service, the reply is F((m)) and the 
service proceeds as described by F. 

Hence, the service can be viewed as the process defined by the guarded recursive 
specification that consists of an equation 

J2 + ■ "^)) • ^(G(M)) • (P^G < -Jr(m) n -JsiB) > Pg) 

for each reply function G. Here, we write r(m) for the action of receiving a 
request to process command m, r(?m) for the action of receiving a request to 
report back what the reply would be to the request to process command to, and 
s{v) for the action of sending reply v. 
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15 Concluding Remarks 



We have added the empty process constant to the different extensions of ACP 
with conditional expressions presented in |10| . In the past, the addition of the 
empty process constant to ACP was rather problematic. Its current addition to 
the different extensions of ACP with conditional expressions presented in [TU] 
turns out to present no additional complications. 

The addition of the empty process constant to different extensions of ACP 
in this paper is based on the treatment of the empty process constant in the 
setting of ACP that is chosen in [5^. If it was based on the treatment of the 
empty process constant chosen in [19] instead, the addition of the empty process 
constant to different extensions of ACP in this paper would have been slightly 
different. For example, with the treatment from no special additional axioms 
concerning conditional expressions are needed when adding the empty process 
constant, whereas with the treatment from 1191, the special additional axiom 
e [[ (0 :— >■ e) = i^- e is needed. 

In [llj . we showed that threads, as found in programming languages such as 
Java and C#, and services used by them can be viewed as processes that are 
definable over ACP'^, and that thread-service composition on those processes can 
be expressed in terms of operators of ACP'^ extended with action renaming. In 
fact, the termination behaviour of the composition of a thread with the services 
used by it can be dealt with more directly, and without action renaming, in 
ACP^. 
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